@sigintzero_

Rust/Solana-native Web3 security. On-demand AI audits (Sentinel), 24/7 runtime monitoring (Tripwire). We watch your contracts after they ship

sigintzero.com
Joined January 2026
  • Tweets56
  • Following21
  • Followers115
5Media
sigintzero retweeted
mono
@monodev_ethOct 20
BiFi's USDT market on Ethereum sat untouched for 36 days. When it woke up, the code charged all 36 days of interest at whatever rate the market showed in that moment. Inside one transaction you get to set that rate yourself. $165K out, in a single block.
1
1
3
95
sigintzero retweeted
mono
@monodev_ethOct 19
On Friday a rescue bot paid the Cetus hacker about $392K. Eight Sui Bridge withdrawals from the May 2025 exploit sat signed and unclaimed for 17 months. The bot claimed them all, paid the gas, then asked the hacker for a tip. The 109k USDT still isn't frozen.
1
1
1
119
With Tripwire there is no excuse.
1
1
4
6
830
Info: sigintzero.com/tripwire

Tripwire: A Circuit Breaker for Smart Contracts

Real-time rules, pending-transaction detection and on-chain pause. Open source, or hosted and managed by SigIntZero.

sigintzero.com
1
1
36
Github: github.com/sigint-zero/tripw…

GitHub - sigint-zero/tripwire

Contribute to sigint-zero/tripwire development by creating an account on GitHub.

github.com
26
sigintzero retweeted
mono
@monodev_ethOct 15
Someone took about $1.28M from Papertrade, a new 1000x perps venue on Hyperliquid, within eight hours of launch. It prices every trade at Hyperliquid's live mid. So they bought ~6,000 ETH to push it $3, closed, flipped short, sold it back. 296 wins out of 305.
1
1
1
250
sigintzero retweeted
mono
@monodev_ethOct 9
A Fomo user lost about $48K to a fake "human check". Find the four-legged animal, drag it to the bookmarks bar, click it 3 times. The bookmark was JavaScript. Clicked on the logged-in Fomo tab, it grabbed the login tokens. No wallet connect, no signature. No 2FA either.
1
1
2
349
sigintzero retweeted
mono
@monodev_ethOct 8
Two Safe wallets lost 114 ETH last week through a helper module their owner had switched on. Before acting, the module asked its caller one thing: am I enabled on you? The attacker's fake Safe said yes. So the module ran the attacker's calls on the real Safes.
2
1
4
261
sigintzero retweeted
mono
@monodev_ethOct 2
Someone stole 0.36 ETH from MetaMask's staking setup this week. MetaMask is exiting about $1.4B of staked ETH over it. They changed the reward address on 18 validators. That change has to be signed by the validator key, the same key that can get you slashed.
5
1
5
474
sigintzero retweeted
mono
@monodev_ethSep 24
Someone bought $20k of NTRN and staked it 11 minutes before a Neutron vote closed. It passed. The proposal made them admin of 10 Astroport and Drop contracts. 24 minutes later all 10 ran their code and were empty. About $9.4M. It sat in plain view for three days.
1
1
1
341
sigintzero retweeted
mono
@monodev_ethSep 23
This bridge contract had a cap written into it. One million tokens per conversion. It enforced that on deposits. On payouts it enforced nothing. Someone got the signing key and asked for 8.7 million in one call. Float gone. The older version checked both ways.
1
1
1
346
sigintzero retweeted
mono
@monodev_ethSep 9
Liquid lost 4,000 BTC on Sunday. About 95% of what backs L-BTC. The coins were minted from nothing and pegged out like any order. Every key stayed put. The hole was a cache key. Four fields hashed back to back, no length prefixes. Merged 5 days earlier. Never released.
2
1
1
349
Dive into our members @sigintzero_ 🇦🇺 Aussie security builders quietly cooking. Their Sentinel AI auditor caught 2 critical/high bugs missed by 32 other audit tools. Tripwire then took first in our @colosseum Frontier AU side track. Audit before launch. Defend after. Serious infra. Check them out below 👇
2
2
1
12
556
sigintzero retweeted
mono
@monodev_ethSep 2
Everyone ran this as a $9.3M hack. Flow later corrected it to $410k. More Markets on Flow lost its whole WFLOW reserve Monday. Staking 1 FLOW minted 1 ankrFLOW. Redeeming 1 ankrFLOW paid 1.2 FLOW. Loop that 54 times, print 52M tokens, post them as collateral.
1
1
1
403
sigintzero retweeted
mono
@monodev_ethAug 31
A token doing about $11k of daily volume was backing $119M of loans on Cronos. Someone spent ~$600k pushing TONIC up 100x in 20 minutes, posted it as collateral, and borrowed Tectonic empty. Validators halted the entire chain to trap the money. About $6M got out.
1
1
1
351
sigintzero retweeted
mono
@monodev_ethAug 24
Someone lost 810 ETH on Tornado Cash last week. About $2M. The contracts were fine. They opened an old bookmark. That web address lapsed while the project was sanctioned and somebody else picked it up. The clone sitting there kept their withdrawal secret.
1
1
3
454
sigintzero retweeted
mono
@monodev_ethAug 20
Maya Protocol lost $1.7M this week to six separate bugs. Each one was small enough to pass an audit alone. One transaction chained them. It minted 49M tokens into a pool nothing backed, then the attacker bought 99.93% of it and left with 20 BTC.
1
1
305
Average time from exploit start to drained treasury: under 20 minutes. Your audit ended the day it shipped. 🔴 Tripwire watches your live contracts right now, and fires a pre-approved runbook in seconds.
1
2
1
7
782
What it watches, and what happens in those first seconds. sigintzero.com/tripwire

Tripwire: A Circuit Breaker for Smart Contracts

Real-time rules, pending-transaction detection and on-chain pause. Open source, or hosted and managed by SigIntZero.

sigintzero.com
3
99
sigintzero retweeted
mono
@monodev_ethJul 22
A fake Solidity extension showed up on the TRAE editor. Install it and your machine gets backdoored the second the IDE opens. The clever bit: it reads its C2 server off an Ethereum contract. Kill the server, they just write a new one on-chain.
1
1
2
574
Load more